Known vulnerabilities in spicethemes NewsBlogger
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-12821 | The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 0.2.5.6 to 0.2.5.9 | 8.8 High | Feb 19, 2026 |
| CVE-2025-1305 | The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,… | 8.8 High | May 1, 2025 |
| CVE-2025-1304 | The NewsBlogger theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the… | 8.8 High | May 1, 2025 |